DisclosureLens
MalwareManufacturingManufacturingRansomwareData ExfiltratedData PublishedRansom DemandedPIIIdentity (basic)LowContained

Wabtec Corporation

bd_32b50f63129f4389 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 26, 2022

Filed

Dec 30, 2022

To disclose

27 weeks

Affected

6state residents only

Linked

8 records

Confidence

66%

Wabtec Corporation notified Montana residents of a data breach where malware introduced as early as March 15, 2022, led to unauthorized access and data exfiltration. Wabtec discovered the incident on June 26, 2022, and notified the FBI. Personal information, including names, was accessed and posted to a leak site. Wabtec offered 24 months of credit monitoring.

Leak gap clock⏱ Leak >90d27 weeks discovery → filing

Incident timeline

undetected · 103 days
discovery → filing · 27 weeks / 187 days

Mar 15, 2022

Begins

Jun 26, 2022

Discovered

Dec 30, 2022

Filed

This filing is one of 8 records about the same incident.View merged incident
A leak claim by lockbit_3 about this victim was first seen 134 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Show 2 more filings ↓up to 370d gap

Filing propagation · 7 filings · 7 states

View merged incident ↗
Indiana State AGDec 30 · first
New Hampshire State AGDec 30 · first
Maine State AGDec 30 · first
Massachusetts State AGDec 30 · first
Montana State AGDec 30 · first · this page

Pattern: first filing Dec 30 (IN), last Jan 4 (CA) — a 370-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.